Define risk assessment

The Change Management - Risk assessment plugin provides a flexible way to capture information from the end user to calculate the risk of the associated change request. You can define the risk assessment questions, thresholds, and conditions based on which the risk for a particular change request is calculated.

Before you begin

Role required: admin or change_manager

The Change Management - Risk assessment plugin is activated.

About this task

You can use libraries of questions to derive the risk of a change based on criteria contained within the change record. For example, a different set of questions are set for a hardware change versus a software change.

The assessment uses a weighted score approach for each question. The composite weighted score derived from the end user's answers is used to calculate risk. This is based on the thresholds associated with the risk assessment.

Procedure

  1. Navigate to Change > Risk Assessments.
  2. Click New.
    The Risk Assessment form appears.
  3. Fill in the fields, as appropriate.
    Table 1. Risk Assessment form
    Field Input value
    Name Enter a name for the risk assessment. This name will be displayed to the end user.
    Introduction Enter an introduction for the end user, if required.
  4. Click Submit to submit the details and create a new risk assessment record.
  5. Open the newly created risk assessment record.
  6. In the Assessment Questions related list, click New. The Assessment Questions related list enables you to define the questions that the end user must answer as part of assessing the risk involved in a change.
    1. Fill in the fields, as appropriate.
      Table 2. Assessment Questions related list
      Field Description
      Question Enter the question that will be displayed to the end user. You must a use a select list.
      Note: You cannot ask mandatory choice list questions because they are not supported.
      Weight Enter the weight to be applied to each question. This weight is multiplied to the score of the answer to calculate the weighted score.
    2. Click Submit to submit the details and create a new risk assessment question set.
    3. Open the newly created question set.
    4. In the Assessment Question Choices related list, click New. The Assessment Question Choices related list enables you to define the multiple choices that the end user must answer.
    5. Fill in the fields, as appropriate.
      Table 3. Assessment Question Choices related list
      Field Description
      Order Enter the order number to determine the sequence in which the choice will be displayed to the end user. The choices are sequenced from lowest order to highest.
      Value Enter the choice to be displayed to the user.
      Score Enter the score to be awarded to the choice.
    6. Click Submit to submit and save the question choice.
  7. In the Risk Assessment Thresholds related list, click New. The Assessment Thresholds related list enables you to determine the risk that will be set depending on the calculated composite score for a completed assessment. The composite score is the sum of all weighted scores for the assessment.
    Note: Ensure that the thresholds are set based on the questions and answer combinations.
    1. Fill in the fields, as appropriate.
      Table 4. Risk Assessment Thresholds related list
      Field Description
      Assessment Enter a name for the assessment threshold.
      Score Greater Than Enter the score number.
      Note: If the score, which is totalled from all of the end user's answers is greater than your specified score number, then the risk in the Risk field will be applied to the change.
      Risk Select the risk level to apply if the risk threshold is met.
    2. Click Submit to submit and save the risk assessment threshold.
  8. In the Assessment Conditions related list, click New. The Assessment Conditions related list enables you to determine the risk assessment is attached to each change. Typically, the first attachment that matches the conditions gets attached during evaluation. Therefore, ensure that the conditions result in the correct assessments being attached especially when defining multiple questionnaires.
    Note: Ensure that the conditions are simple and mutually exclusive so that the assessment conditions are easier to understand and maintain.
    1. Fill in the fields, as appropriate.
      Table 5. Risk assessment conditions related list fields
      Field Description
      Active Select the check box if you want the condition to be evaluated.
      Condition Enter the conditions that will determine which changes will use the specific risk assessment.
      Description Enter a description of the condition.
      Order Enter the order number that will determine the sequence in which the risk assessment will be used. If multiple conditions apply, the risk assessment with the lowest order will be used.
      Table Select the table on which the risk assessment will be run.
      Note: Select the Change [change_request] table if the risk assessment is used on the Change table.
      Note: In case of a default questionnaire, you can add a condition record with no conditions and set the order to a suitably higher number to ensure that other conditions are evaluated first.
    2. Click Submit to submit and save the risk assessment conditions.

What to do next

Users can now enter risk assessment information that will calculate the risk associated with a specific change request.